k9s/etcd - remove any unused controller nodes
etcdctl –endpoints=https://127.0.0.1:2379 \
–cacert=/etc/kubernetes/pki/etcd/ca.crt \
–cert=/etc/kubernetes/pki/etcd/server.crt \
–key=/etc/kubernetes/pki/etcd/server.key \
member list
etcdctl member remove abcdxyz…
k9s/configmap/kube-system/kubeadm-config , add new controller IP
kubeadm certs renew apiserver
kubeadm certs renew apiserver-kubelet-client
kubeadm certs renew etcd-server
kubeadm certs renew etcd-peer
kubeadm certs renew etcd-healthcheck-client
kubeadm certs renew apiserver-etcd-client
systemctl restart kubelet
kubeadm init phase upload-certs –upload-certs
kubeadm token create –print-join-command
on new controller node
cp files from the current master : admin.conf ca.crt/key sa.pub/key front-proxy-ca.crt/key etcd/ca.crt/key
kubeadm join <control-plane-endpoint>:6443 \
–token <token> \
–discovery-token-ca-cert-hash sha256:<hash> \
–control-plane \
–certificate-key <cert-key>
etcdctl \ --endpoints=https://127.0.0.1:2379 \ --cacert=/etc/kubernetes/pki/etcd/ca.crt \ --cert=/etc/kubernetes/pki/etcd/server.crt \ --key=/etc/kubernetes/pki/etcd/server.key \ member remove 9abcijkl...
This entry was posted
on Monday, June 15th, 2026 at 5:26 am and is filed under Mẹo vặt của hiếu râu.
You can follow any responses to this entry through the RSS 2.0 feed.
Both comments and pings are currently closed.